This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/ZSSuDxoCE3_eFwdfTUSWnRDPsE8.roa File: ZSSuDxoCE3_eFwdfTUSWnRDPsE8.roa (raw, json) Hash identifier: PPIOgp4NjFXsYuOWxQoSBUarq2WQUEJtAkW510E33lI= Subject key identifier: 65:24:AE:0F:1A:02:13:7F:DE:17:07:5F:4D:44:96:9D:10:CF:B0:4F Certificate issuer: /CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05 Certificate serial: 019B7A5A8BB2D886F6906BFB2FB25A174455 Authority key identifier: F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/ZSSuDxoCE3_eFwdfTUSWnRDPsE8.roa Signing time: Thu 01 Jan 2026 16:18:32 +0000 ROA not before: Thu 01 Jan 2026 16:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43431 IP address blocks: 185.1.150.0/24 maxlen: 24 2001:7f8:e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8b:b2:d8:86:f6:90:6b:fb:2f:b2:5a:17:44:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05 Validity Not Before: Jan 1 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6524ae0f1a02137fde17075f4d44969d10cfb04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:af:ea:74:c1:56:b7:0a:83:96:20:0e:8e: c8:82:e5:67:15:7c:0d:5a:d7:12:92:4a:61:3e:8e: 37:3d:85:1c:63:88:eb:6c:d7:b0:88:11:24:3d:d2: 6f:99:02:6a:48:c5:28:02:a9:98:e9:78:32:f9:9f: 68:24:66:74:3c:99:5d:43:30:96:bf:3f:ab:19:bc: dc:83:79:1b:c0:4d:bb:9e:8e:9a:51:f9:81:96:0b: 50:89:c3:52:60:3c:1b:d4:89:02:2a:f6:3a:3f:e5: dc:61:aa:f1:1c:18:2f:ca:b6:19:89:53:ef:74:1e: 33:3f:16:26:28:e6:fd:cc:86:29:3a:a7:1d:14:a1: 8e:2e:2f:a7:a2:e1:5a:56:ae:4f:d5:02:61:db:bf: 0f:22:50:c4:3d:c0:05:45:2f:89:2b:58:18:68:ff: 2f:54:1e:05:c4:d9:a0:54:b2:3c:56:b7:32:d6:0a: 8d:c3:40:3a:8f:7f:cd:a4:62:7c:dd:aa:6e:d0:6a: 7d:d1:08:c2:10:19:74:d2:52:0d:2e:34:d1:08:60: 3b:d3:56:03:e8:6f:c8:6a:b5:08:9e:d5:62:2a:d2: 26:94:94:9f:c0:e1:90:48:e6:57:17:09:b0:dc:86: de:89:38:51:42:f1:8f:2a:c9:56:cf:a0:4c:0c:91: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:24:AE:0F:1A:02:13:7F:DE:17:07:5F:4D:44:96:9D:10:CF:B0:4F X509v3 Authority Key Identifier: keyid:F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/ZSSuDxoCE3_eFwdfTUSWnRDPsE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.150.0/24 IPv6: 2001:7f8:e4::/48 Signature Algorithm: sha256WithRSAEncryption 60:20:0f:cd:8b:95:67:72:3c:b1:06:c4:25:6f:c4:f7:d2:ca: 26:78:5b:30:27:69:2f:84:84:d4:86:e6:69:77:37:94:e0:3a: 19:ce:19:6d:b2:40:c1:eb:fd:ab:eb:e3:9e:31:ed:82:04:62: 8e:f5:00:36:28:43:c1:03:2f:eb:1d:cc:6c:f5:30:34:4a:f5: b2:c7:4f:ff:1b:68:bd:41:cd:70:59:b9:03:b5:3e:6f:ba:5f: fd:02:ae:45:3c:ca:5c:1a:bc:ae:49:bd:25:b8:4e:90:2e:5c: e8:dc:b5:41:2f:db:ec:18:27:69:72:cc:84:f5:a5:06:8c:3d: f0:68:75:e1:4f:27:9a:51:47:84:c4:d1:e4:dc:55:8e:64:e0: 55:9c:1f:e7:e1:04:1f:a3:fc:b4:8c:d6:23:d7:43:f7:db:91: d3:9c:bd:67:d5:68:1f:e5:44:9d:7a:96:cb:65:58:35:ac:8e: a4:3a:2b:70:9e:81:8f:21:d4:3b:da:4f:21:30:e0:8e:cd:8e: 56:e1:25:f6:9f:21:3c:16:50:29:ff:63:e3:54:a9:8d:e4:0b: 03:12:6e:0b:2f:f4:cd:40:72:0f:c7:fb:f6:81:48:93:3e:e0: 46:b0:f2:ff:ba:32:53:2f:92:30:cb:f6:fa:e3:06:45:41:bc: 37:d4:28:39 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt6Wouy2Ib2kGv7L7JaF0RVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTY0N2U1NDdjNGFmNGU1YmRjNjU5ZTRjMTRmOTFmZjlj ZThhMDUwHhcNMjYwMTAxMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTI0YWUwZjFhMDIxMzdmZGUxNzA3NWY0ZDQ0OTY5ZDEwY2ZiMDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7+v6nTBVrcKg5YgDo7IguVnFXwN WtcSkkphPo43PYUcY4jrbNewiBEkPdJvmQJqSMUoAqmY6Xgy+Z9oJGZ0PJldQzCW vz+rGbzcg3kbwE27no6aUfmBlgtQicNSYDwb1IkCKvY6P+XcYarxHBgvyrYZiVPv dB4zPxYmKOb9zIYpOqcdFKGOLi+nouFaVq5P1QJh278PIlDEPcAFRS+JK1gYaP8v VB4FxNmgVLI8Vrcy1gqNw0A6j3/NpGJ83apu0Gp90QjCEBl00lINLjTRCGA701YD 6G/IarUIntViKtImlJSfwOGQSOZXFwmw3IbeiThRQvGPKslWz6BMDJF94QIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFGUkrg8aAhN/3hcHX01Elp0Qz7BPMB8GA1UdIwQY MBaAFPkWR+VHxK9OW9xlnkwU+R/5zooFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SWkg1VWZFcjA1YjNHV2VUQlQ1SF9uT2lnVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvM2UyNjYzLTFmYjMtNDM2ZC1hZTc1 LTIxNGY4NzUzMGJhZi8xL1pTU3VEeG9DRTNfZUZ3ZGZUVVNXblJEUHNFOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjQvM2UyNjYzLTFmYjMtNDM2ZC1hZTc1LTIxNGY4NzUzMGJh Zi8xLzEtUlpINVVmRXIwNWIzR1dlVEJUNUhfbk9pZ1UuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAC5AZYw DwQCAAIwCQMHACABB/gA5DANBgkqhkiG9w0BAQsFAAOCAQEAYCAPzYuVZ3I8sQbE JW/E99LKJnhbMCdpL4SE1IbmaXc3lOA6Gc4ZbbJAwev9q+vjnjHtggRijvUANihD wQMv6x3MbPUwNEr1ssdP/xtovUHNcFm5A7U+b7pf/QKuRTzKXBq8rkm9JbhOkC5c 6Ny1QS/b7BgnaXLMhPWlBow98Gh14U8nmlFHhMTR5NxVjmTgVZwf5+EEH6P8tIzW I9dD99uR05y9Z9VoH+VEnXqWy2VYNayOpDorcJ6BjyHUO9pPITDgjs2OVuEl9p8h PBZQKf9j41SpjeQLAxJuCy/0zUByD8f79oFIkz7gRrDy/7oyUy+SMMv2+uMGRUG8 N9QoOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:42 2026 by rpki-client